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SUMMARY 


This  report  recommends  a  methodology  for  estimating  the  probabilities 
and  yields  of  accidental  explosions  at  Naval  shore  facilities.  Consid¬ 
erations  that  are  included  are  the  activities  involving  the  maintenance 
of  ordnance,  the  probability  of  fires  and  initiation  from  fires,  and 
the  sympathetic  detonation  of  explosives. 

The  mathematical  approach  allows  for  the  use  of  a  Bayesian  methodology 
when  the  data  base  is  inadequate.  A  methodology  is  also  included  for 
synthesizing  the  event  probabilities  so  that  lists  of  ordnance  locations 
can  have  probabilities  of  explosions  for  various  yields.  The  methodol¬ 
ogy  also  keeps  track  of  uncertainty  in  the  predictions. 
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1 .  INTRODUCTION 

The  purpose  of  this  study  is  to  establish  a  rational  basis  for  determin¬ 
ing  the  source,  size  and  frequency  of  inadvertent  explosions  resulting 
from  the  maintenance,  storage  and  transfer  of  ordnance  at  the  Navy  Tide¬ 
water.  This  is  the  first  step  in  moving  the  procedures  used  to  regulate 
construction  and  location  of  personnel  from  a  deterministic  to  a  prob¬ 
abilistic  (calculated  risk)  basis.  For  years,  explosives  safety  quantity 
distance  (ESQD)  tables,  relating  charge  weight  to  safe  separation  distance 
(derived  from  historical  records  of  accidental  explosions)  have  been  used 
to  determine  the  spacing  of  ships  at  port,  the  positioning  of  inhabited 
structures  and  the  locating  of  personnel.  These  ESQD  tables  do  not 
consider  the  likelihood  of  an  explosion,  but  rather  the  protection 
required  given  an  explosion.  If  land  were  not  limited,  or  had  no  cost, 
this  would  be  a  proper  approach.  However,  because  of  land  limitation 
and  cost,  Navy  bases  have  had  to  encroach  upon  the  area  identified  as 
hazardous  by  the  ESQD  tables.  To  do  this,  waivers  of  the  ESQD  distance 
have  been  obtained  with  no  knowledge  of  the  additional  risk  being  accepted 
as  a  result  of  unavoidable  deviations  from  established  safety  standards. 

Since  the  current  deterministic  approach  to  explosion  safety  at  the 
waterfront  has  created  a  situation  of  many  waivers  and  unknown  risk, 
a  new  methodology  must  be  introduced  which  determines  the  risk  of  any 
deviations  from  established  safety  standards  and  can  provide  guidelines 
for  minimization  of  risk  in  future  expansion  or  modification  at  the 
Tidewater.  The  methodology  presented  in  this  report  is  to  provide  a 
basis  for  the  risk  computation,  ..  namely,  estimating  the  source,  size 
and  frequency  of  explosions  resulting  from  ordnance  operations.  The 
methodology  provides  an  estimate  of  the  probability,  and  uncertainty 
in  the  estimate,  of  an  accidental  explosion  resulting  from  a  handling 
mishap,  fire  mishap,  or  the  storage  and  spacing  of  explosives.  It  is 
understood  that  the  methodology  must  be  developed  with  a  minimum  of 
impact  on  current  Navy  procedures.  It  must  be  rational,  reasonable 
and  do-able,  and  must  also  acknowledge  uncertainty  and  quantify  that 
uncertainty  wherever  it  exists.  The  methodology  that  is  presented  in 
the  following  sections  of  this  report  attempts  to  satisfy  these  require¬ 
ments. 
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2. 


THE  TIDEWATER  SCENARIO 


Before  the  discussion  of  the  model,  it  is  important  to  describe  a  typical 
tidewater  scenario*  in  order  to  give  the  reader  a  perspective  of  the 
variety  of  operations  and  the  various  elements  which  must  be  considered 
in  establishing  the  probability  of  an  explosion  of  ordnance.  For  this 
discussion,  a  submarine  base  was  chosen  which  consisted  of  the  following 
elements: 

(1)  A  pier  with  a  submarine  tender  moored  alongside, 

(2)  A  submarine  alongside  the  tender, 

(3)  A  submarine  alongside  the  pier, 

(4)  A  magazine  on  shore  for  storage  of  warheads, 

(5)  A  shop  for  maintenance  and  checkout  of  torpedoes. 

A  typical  sequence  of  activities  for  the  movement  of  a  fused  MARK  48  torpedo 
from  the  tender  to  the  torpedo  shop  and  then  back  to  the  submarine  is  shown 
in  Figure  2-1.  An  attempt  has  been  made  in  this  figure  to  detail  each  new 
activity  in  the  transfer  process.  Henceforth,  these  individual  and  unique 
activities  will  be  defined  as  links  in  the  transfer  process.  It  would  be 
possible  to  take  each  of  the  ordnance  handling  activities  at  the  base  and 
characterize  them  in  sequential  processes  as  demonstrated  in  Figure  2-1.  This 
would  then  provide  an  analyst  of  risk  with  fine  detail  on  all  of  the  pro¬ 
cedures  and  actions  in  the  handling  of  ordnance.  If  accurate  statistics 
were  available  on  the  probability  of  a  mishap  in  each  one  of  these  links, 
it  would  be  a  simple  matter  to  construct  the  probabilities  of  various 
explosive  yields  stemming  from  the  maintenance,  storage  and  transfer  of 
Mark  48  torpedoes.  However,  in  general  there  are  no  records  of  the 
quantity  of  such  activities  and  limited  information  on  mishaps  which 
lead  to  no  explosive  incident.  There  is  also  the  problem  that  the 
activities  or  procedures  may  change  slightly  with  changes  in  leadership 
at  the  facility.  A  third  problem,  of  course,  is  the  unknown  deviations 
from  standard  operating  procedures  and  equipment.  The  oimsion  of  these 
becomes  part  of  the  "error  of  omission"  which  frequently  baur.ts  the 
safety  and  hazard  analysis. 


*The  tidewater  hazard  scenario  refers  to  the  ordnance  operations  performed 
within  the  confluence  of  piers,  wharfs,  and  berthed  ships  at  waterfronts 
where  ordnance  is  received  or  offloaded  for  the  purpose  of  homeporting. 

The  type  and  number  of  ships,  berthing  arrangement  of  ships,  quantity  and 
type  of  ordnance  aboard  each  ship,  types  of  ordnance  handling  equipment, 
and  nature  of  ordnance  operations  vary  with  time  and  geographical  location. 
Each  of  these  factors  must  be  considered  in  estimating  the  sources,  size 
and  probability  of  accidental  explosions.  [Ref.  1] 
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USED  MARK  48  TORPEDO  (WAR  SHOT) 
SUBMARINE  DOCKED  ON  NON-PIER  SIDE  OF  TENDER  SHIP 


TORPEDO  TRANSFERRED  TO  TENDER  SHIP  MONORAIL  CRANE 
RAISE,  TRANSPORT  ACROSS  SHIP  AND  LOWER  TO  FLATBED  TRUCK  ON  PIER 
TRANSFER  TO  RACK  ON  FLATBED  TRUCK 
MOVE  TO  MK  48  TORPEDO  SHOP  (-3/4  MILE) 

TRANSFER  TO  MOBILE  CRANE 
LOWER  TO  HANDLING  CART 
TRANSFER  TO  HANDLING  CART 

MOVE  CART  AND  TORPEDO  INSIDE  BUILDING  TO  TEST  AMD  MAINTENANCE  BAY 
TRANSFER  TO  BUILDING  CRANE 

LOWER  TO  HANDLING  JIG  IN  TEST  AND  MAINTENANCE  BAY 

TRANSFER  TO  HANDLING  JIG 

REMOVE  SENSOR,  WARHEAD,  AND  GUIDANCE  BAY 

TRANSFER  WARHEAD  (VIA  SLING)  TO  BUILDING  CRANE  (ALSO  SENSOR  AND 
GUIDANCE  BAY  IF  NECESSARY) 

MOVE  WARHEAD,  SENSOR  AND  GUIDANCE  BAY  TO  BUILDING  STORAGE  RACK 
(OR  FLOOR  IF  RACKS  FULL) 

TRANSFER  WARHEAD  ETC.  TO  STORAGE  AREA 

TRANSFER  PROPELLANT  TANK  A.yO  MOTOR  TO  BUILDING  CRANE 

BRING  PROPELLANT  TANK  AND  MOTOR  TO  CLEANING  ROOM  FOR  CLEANING  AND 
REFURBISHMENT 

TRANSFER  PROPELLANT  TANK  AND  MOTOR  TO  CLEANING  ROOM 

CLEAN  AND  REFURBISH  PROPELLANT  TANK  AND  MOTOR 

TRANSFER  PROPELLANT  TANK  AND  MOTOR  TO  BUILDING  CRANE 

BRING  PROPELLANT  TANK  (AND  MOTOR  ASSEMBLY)  TO  REFUELING  ROOM 

TRANSFER  PROPELLANT  TANK  (AND  MOTOR  ASSEMBLY)  TO  REFUELING 
ROOM 

REFUEL  PROPELLANT  TANK 

TRANSFER  PROPELLANT  TANK  AND  MOTOR  ASSEMBLY  TO  CRANE 

BRING  PROPELLANT  TANK  AND  MOTOR  ASSEMBLY  TO  TEST  AND  MAINTENANCE  BAY 

TRANSFER  PROPELLANT  TANK  AND  MOTOR  TO  JIC  IN  BAY 

TRANSFER  WARHEAD  (SENSOR  AND  GUIDANCE  BAY)  TO  BUILDING  CRANE 

BRING  WARHEAD  (SENSOR  AND  GUIDANCE  BAY)  TO  JIG  IN  TEST  AND 
MAINTENANCE  BAY 

TRANSFER  WARHEAD  (SENSOR  AND  GUIDANCE  BAY)  TO  JIG  IN  BAY 

ELECTRICALLY  MATE  TORPEDO  COMPONENTS  THEN  AUTOMATICALLY  TEST, 
MECHANICALLY  REASSEMBLE, 

TRANSFER  TORPEDO  TO  BUILDING  CRANE 

LOWER  TO  HANDLING  CART 


Figure  2-1.  Ordnance  Move/Store  Operations  (Mark  48) 
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A 


TRANSFER  TO  HANDLING  CART 

MOVE  CART  AND  TORPEDO  OUTSIDE  BUILDING 

TRANSFER  TORPEDO  TO  MOBILE  CRANE 

RAISE  TORPEDO  AND  LOVER  TO  FLATBED  TRUCK 

TRANSER  TORPEDO  TO  FLATBED  TRUCK 

BRING  TORPEDO  DOWN  TO  TENDER  SHIP 

TRANSFER  TORPEDO  TO  TENDER  SHIP  MONORAIL  CRANE 

RAISE  TORPEDO,  TRANSPORT  ACROSS  SHIP  AND  LOVER  TO  SUBMARINE 


B)  (c) 


B  IS  FOR  VERTICALLY  LOADED  TORPEDOS  ON 
SUBMARINES  WITHOUT  HYDRAULIC  CHUTE 

C  IS  FOR  ANGLE  LOADED  TORPEDOS  ON  SUB¬ 
MARINES  WITH  HYDRAULIC  CHUTE 

OFFLOADING  PROCEDURE  IS  REVERSE  OF  B  OR  C 


{VERTICALLY  LOADED  TORPEDOS 

TORPEDO  MANHANDLED  TAIL  FIRST  DOWN  THROUGH  23  INCH  HATCH  IN  TOP 
OF  SUBMARINE  TO  DOLLY  CART  IN  SUB  FLOOR 

TORPEDO  TRANSFERRED  TO  CART 

CART  PUSHED  ALONG  FLOOR  OF  SUB  TO  TORPEDO  ROOM 

TRANSFER  TORPEDO  TO  CHAIN  HOIST  AND  SLING 

LIFT  TORPEDO  TO  SUB  MAGAZINE  RACKS 

TRANSFER  TORPEDO  TO  MAGAZINE  RACK 

(C)  ANGLE  LOADED  TORPEDOES 

y  TORPEDO  TRANSFERRED  TO  HYDRAUICALLY  DRIVEN  CRADLE  AND  CLAMPED 

SLIDE  TORPEDO  INTO  SUBMARINE  TO  CART  ON  MAGAZINE  FLOOR  WHICH 
MATES  WITH  HYDRAULIC  SLIDE  UNIT 

y  TRANSFER  TORPEDO  TO  CART 

CART  PUSHED  ALONG  FLOOR  OF  SUB  TO  TORPEDO  ROOM  (AS  FOR  VERTICAL 
LOADER) 

y  TRANSFER  TORPEDO  TO  CHAIN  BOIST  AND  SLING 
J  LIFT  TORPEDO  TO  SUB  MAGAZINE  RACKS 
V  TRANSFER  TORPEDO  TO  MAGAZINE  RACKS 


OFFLOADING  PROCEDURE  REVERSE  OF  B  OR  C  AS  APPROPRIATE  B  AND  C 
PROCEDURES  ARE  SAME  FOR  ALL  CLASSES  OF  TORPEDO  AND  SUBROC 
MISSILE 


Figure  2-1.  Ordnance  Move/Store  Operations  (Mark  48)  (cont.) 
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Another  set  of  activities  for  the  move  and  store  operations  is  shown  in 
Figure  2-2.  In  this  case  torpedoes  are  brought  to  the  tender  from  a  vessel 
or  barge  and  loaded  directly  into  the  tender  on  the  side  opposite  the  pier. 

Mishaps  in  the  handling  of  ordnance  do  not  necessarily  lead  to  a  detona¬ 
tion.  Much  of  the  ordnance-handling  activity,  and  the  ordnance  itself,  is 
designed  such  that  if  a  mishap  occurs,  such  as  the  dropping  of  a  warhead, 
the  impact  of  the  warhead  on  the  surface  will  not  create  enough  concussion 
within  the  explosive  to  cause  a  detonation.  Many  of  the  more  modern  and 
sophisticated  explosives  are  also  becoming  more  and  more  insensitive  to 
shock  of  this  nature.  However,  even  though  an  explosive  is  reasonably 
insensitive  to  the  shock  from  impact,  there  is  a  larger  than  zero  probabil¬ 
ity  that  some  form  of  detonation  can  occur.  Hence,  it  will  be  necessary 
in  treating  risk  during  these  handling  activities  to  have  conditional 
probabilities  of  explosion  as  a  function  of  the  nature  of  the  mishap  and 
the  explosive.  This  will  account  for  the  fact  that  the  drop  of  a  warhead 
one  foot  off  the  ground  will  have  a  different  probability  of  detonation 
than  a  drop  from  forty  feet  above  the  ground. 

Also,  the  yield  which  may  result  from  detonation  may  vary  with  the  type  of 
mishap  that  may  occur.  In  general  in  this  study,  some  small  yields  may  not 
be  of  importance  because  their  contribution  to  the  expected  damage  or  life 
loss  may  be  small.  Hence,  yields  smaller  than  a  specified  level  will  be 
ignored  except  where  they  present  a  fragment/debris  hazard  or  can  cause 
initiation  of  other  explosives  leading  to  events  having  very  much  higher 
yields.  The  problem  of  sympathetic  detonation,  therefore,  becomes  a 
critical  element  in  the  analysis. 

Last,  but  certainly  not  least,  in  the  consideration  of  the  initiation  of 
explosives,  are  the  problems  created  by  fire.  The  event  sequences  shown 
in  Figures  2-1  and  2-2  are  generally  related  to  the  dropping  of  ordnance. 
Fires  are  not  always  so  easy  to  define  from  the  standpoint  of  event 
sequences,  and  frequently,  in  the  case  of  ordnance,  may  involve  ordnance 
which  is  not  in  the  handling  process.  Nevertheless,  fires  must  be  treated 
because  of  their  very  large  potential  to  cause  an  ordnance  explosion  inci¬ 
dent.  Fires  may  also  be  the  link  which  leads  to  a  sequence  of  explosions .. 
resulting  from  an  initial  explosion.  The  approach  to  fire  must  be  based 
on  the  occurrence  of  fire  in  all  of  the  ordinary  operations  at  a  base. 

The  initiation  of  explosives  becomes  a  problem  when  fire,  radiation,  or 
heated  air  raise  the  temperature  of  the  explosive  to  a  point  of  instability. 
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SIDE  LOADING  ONTO  TENDER  SHIP 
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Figure  2-2.  Ordnance  Move/Store  Operations  (Mark  14,  Mark  37) 


3.  SELECTION  OF  A  METHODOLOGY 

3.1  Goals,  Objectives  and  Constraints 

The  goal  of  the  Navy  Explosives  Safety  Facilities  (NESF)  project  is  to 
develop  an  operational  risk-decision  model  which  will  quantify  the  magni¬ 
tude  and  identify  the  sources  of  risk  and  evaluate  alternative  policies 
(within  specified  operational,  safety  and  budget  constraints)  for  mitiga¬ 
ting  the  risk  to  people  and  property  from  explosives  hazards  at  the  Naval 
Shore  Establishment.  A  vital  product  element  necessary  to  achieve  the 
NESF  goal  is  the  characterization  of  Navy  hazard  scenarios,  especially 
estimating  the  event  (explosion)  probability  of  each  potential  explosion 
source.  In  order  to  develop  a  sound  technical  approach,  information  is 
needed  on  the  state-of-the-art  techniques,  new  technology  requirements, 
and  anticipated  risks  in  the  goal  to  quantify  the  event  (explosion) 
probabilities  for  Navy  tidewater  explosion  hazard  scenarios. 

The  problem  that  is  being  addressed  in  this  particular  study  is  that  of 
establishing  the  probability  of  explosive  events  of  various  yields.  The 
data  base  shows  that  accidental  explosions  ire  very  rare  events.  The 
problem,  then,  is  to  develop  a  methodology  which  makes  maximum  use  of 
mishap  data,  is  reasonable  in  its  predictions,  and  does  not  put  undue 
requirements  on  data  gathering  within  the  Navy.  Believability,  of  course, 
is  a  major  problem,  and  the  methodology  must  survive  the  critical  challenge 
of  the  technical  community. 

The  problem  of  an  insufficient  data  base,  either  of  operating  procedures, 
mishaps,  transactions,  or  accidental  explosions,  in  general,  prevents  us 
from  going  to  a  traditionally  deductive  analysis  at  the  detail  (link)  level. 
We  must  use  either  very  general  interpretations  of  past  experience,  or 
introduce  inductive  analysis  with  models  and  probability  predictions  in 
order  to  accomplish  our  goals.  (Deductive  analysis  can  be  interpreted  as 
those  instances  wherein  the  data  base  is  of  sufficient  size  that  binomial 
statistics  can  be  created  for  predicted  mishaps  with  high  confidence.  If 
the  Navy  were  to  record  all  of  its  operations,  and  continue  using  precisely 
the  same  activity  descriptions  for  a  long  period  (50  years?),  such  a  data 
base  would  be  possible.) 

3 . 2  Tradeoffs  and  Justification  of  Approach 

The  basic  question  in  the  selection  of  an  approach  is  what  is  an  appropriate 
level  of  detail?  As  the  detail  increases,  costs  of  data  development  and 
program  development  increase.  There  is  also  the  conceivable  loss  of  credi¬ 
bility  because  the  sum  of  the  risk  from  a  detailed  description  of  a  base 
may  not  equal  the  experienced  overall  risk  at  the  base  or  similar  bases. 

This  happens  because  detailed  methodologies  (fault  tree,  etc.)  are  rarely 
able  to  model  a  priori  all  of  the  accident  events  that  are  experienced. 
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The  most  redeeming  feature  of  a  detailed  approach  is  that  it  attempts  to 
accurately  locate  and  assign  risk  (yield  and  probability  of  yield)  at 
all  the  points  of  possible  accident  events  and  it  can  be  responsive  to 
the  characteristics  of  a  particular  naval  facility.  This  detail  then 
allows  a  more  accurate  assessment  of  the  individual  blast  source/structural 
damage  relationships  when  evaluating  a  facility.  If  the  facility  damage 
prediction  (allocated  by  structure  and  personnel  locations)  does  not  need 
the  detailed  source  data,  then  the  detailed  approach  is  not  justified. 

The  other  extremum  of  treatment  of  event  probabilities  is  the  employment 
of  a  gross  summary  of  historical  events  at  Navy  facilities  over  the  last 
20-50  years  to  establish  deductively  the  probability  of  occurrence  of 
explosions.  These  probabilities  would  then  be  assigned  to  events  occurring 
at  each  explosive  storage  or  handling  point.  The  yields  associated  with 
the  events  would  be  related  to  the  weight  of  the  stored  explosive  material 
at  that  location.  The  advantage  of  this  approach  is  that  the  average  numbers 
are  easily  justified  by  historical  experience  and  the  methodology  is  simple. 
The  methodology  accuracy  is  directly  dependent  upon  the  ability  to  identify 
all  accident  sources  and  to  assign  probabilities  to  the  sources. 

As  the  effort  toward  accurate  assignment  increases,  the  methodology  moves 
in  the  direction  of  the  detailed  approach.  The  methodology  is  relatively 
insensitive  to  historical  changes  in  procedures,  explosive  behavior,  fire 
control  and  other  influences  on  event  probabilities.  It  is  also  limited 
in  providing  very  accurate  discrimination  between  the  risk  at  the  various 
bases. 

The  method  that  is  proposed  in  this  report  falls  In  the  category  of  the 
detailed  approach.  The  detail  shown  may  prove  to  be  too  fine,  and  it  may 
be  necessary  to  back  off  and  use  more  general  categories  for  link  definitions 
and  the  accumulation  of  data.  If  the  detailed  method  is  adopted  it  should 
also  be  tested  against  the  more  deductive  approach  to  assure  a  comparable 
level  of  total  risk.  The  level  of  detail  should  reflect  the  needs  of  the 
risk  analysis  and  the  availability  of  resources  to  develop  the  data.  Thus 
if  the  detailed  approach  can  reflect  a  varying  level  of  aggregation  it  can 
adjust  more  readily  to  the  program  requirements.  Also,  because  of  the 
evaluation  of  activities,  paths,  etc.,  more  information  can  be  made  avail¬ 
able  about  making  changes  in  ordnance  handling  procedures  and  other  activi¬ 
ties  related  to  risk. 

In  conclusion,  it  is  suggested  that  an  approach  be  adopted  which  provides 
as  much  detail  as  required  to  perform  an  accurate  risk  analysis.  We 
suggest  the  approach  be  based  on  detailing  activities  and  exposures  and 
the  corresponding  development  of  appropriate  data  bases.  To  check  the 
results  we  propose  the  use  of  historical  data  to  test  occurrence  probabil¬ 
ities  and  yields. 
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4.  PROPOSED  METHODOLOGY 

4.1  Introduction 

The  proposed  methodology  to  be  used  for  determining  the  probability  of 
damaging  explosions  is  summarized  in  Figure 4-1 .  This  figure  depicts  the 
activities  of  a  computer  program,  including  the  input  and  the  use 
of  three  data  bases.  It  is  assumed  that  all  explosions  are  the  result 
of  Impact  or  fire  related  initiating  events.  The  methodology  assumes  a 
detailed  evaluation  of  activities  which  could  lead  to  Impact,  a  detailed 
evaluation  of  structures  and  activities  which  could  lead  to  fire,  and 
an  iterated  evaluation  of  secondary  detonations  due  to  the  Influence  of 
neighboring  explosions  or  fires. 

The  proposed  methodology  to  be  used  for  determining  the  probability  of 
explosions  of  various  yields  Is  summarized  In  Figure  4-1.  This  figure  de¬ 
picts  the  activities  of  a  computer  program,  Including  the  Input  and  the  use 
there  is  always  the  chance  of  unknown  and  undefined  events  which 
could  lead  to  disaster.  To  anticipate  this,  careful  review  should  be 
made  of  the  modeling  process  to  make  sure  that  there  is  adequate  conserva¬ 
tism  In  the  description  and  locations  of  all  possible  initiating  events. 
Since  the  methodology  described  herein  does  not  complete  the  risk  model, 
but  only  supplies  probabilities,  it  should  be  advised  that  the  risk  model 
In  Its  formulation  should  anticipate  this  problem.  One  way  that  this 
problem  can  be  minimized.  Is  to  avoid  the  use  of  absolute  risk,  and 
concentrate  on  relative  risk  as  it  applies  to  the  locating  and  use  of 
structures  at  the  tidewater. 

The  procedure  as  shown  In  Figure  4-1  will  lead  to  the  listing  of  probabili¬ 
ties  of  detonations  at  various  locations  and  at  various  yield  levels.  The 
program  will  be  structured  to  eliminate  yields  below  a  level  producing 
little  damage. 

1  •  Facil .ty  Specific  Input  Data 

Ear./  in  the  project,  a  dictionary  of  specific  activity  definitions, 
structure  clarsii  leaf  \jn,  explosive  types,  etc.,  will  ha'  :  to  be  devel- 
r  will  provide  a  basis  for  storage  of  data  on  mishap  probabilities 

in  the  bases.  Then,  all  data  developed  for  a  particular  facility 
will  be  developed  in  a  format  which  Is  consistent  with  the  data  bases. 

The  specific  data  preparation  activities  can  be  defined  as  follows: 

H)  Structure  activities  and  links  from  catalogue  of  activity  links 
{define  for  Impact  Events  Data  Base). 

(2)  Define  locations,  distances  (if  appropriate),  duratio  s  and  repeti¬ 
tions  of  all  activities. 
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Figure  4-1.  Proposed  Methodology 


(3)  Define  structure  types,  uses  and  fire  controls  using  definitions 
consistent  with  the  Fire  Events  Data  Base 

(4)  Define  yields  of  explosives,  types  of  explosives  and  locations  of 
explosives  (definitions  consistent  with  Conditional  Initiation  Data 
Base) 

In  preparing  the  data  input  for  the  computer,  all  of  the  data  gathered 
described  above  would  be  key  punched  along  with  specific  constraint  data 
such  as  the  lowest  level  of  yield  which  is  of  interest  in  the  problem, 
etc. 

4.3  The  Data  Bases 

It  is  proposed  that  three  separate  data  bases  be  developed  to  contain 
the  basic  information  with  regard  to  event  probabilities  and  conditional 
probabilities  of  detonation.  The  three  data  bases  would  be  entitled 
"Impact  Events  Data  Base,"  "Fire  Events  Data  Base,"  and  "Conditional 
Initiation  Data  Base." 

4.3.1  Impact  Events  Data  Base 

The  Impact  Events  Data  Base  would  be  constructed  from  experience  within 
the  Navy  in  the  handling  and  transport  of  ordnance.  Currently,  at  the 
Naval  Surface  Weapons  Center,  there  is  a  complete  reporting  of  all  acci¬ 
dents  with  explosives.  From  this  information,  it  will  be  possible  to 
separate  out  those  accidents  which  are  impact-related.  It  may  not  be, 
however,  easy  to  determine  all  mishaps  which  occurred  which  could  have  led 
to  explosion  from  impact.  In  addition,  there  is  currently  no  data  base 
which  numbers  all  of  the  activities  in  which  an  impact  mishap  could  have 
occurred.  When  using  binomial  probabilities,  the  estimate  of  the  true 
frequency  of  mishap  (it)  is  estimated  by  the  ratio  r/n.  Currently,  r  is 
available  for  reported  accidents  and  n  has  not  been  recorded.  Consequently, 
a  methodology  will  have  to  be  developed  to  establish  n. 

Since  it  has  been  proposed  to  break  up  the  activities  into  basic  links,  it 
will  be  necessary  to  accumulate  the  data  on  r  and  n  for  each  of  these  links. 
To  do  this,  the  Navy  will  have  to  go  to  the  records  for  the  transferral  of 
ordnance  and  infer  the  number  of  transactions  from  the  weight  of  explosive 
recorded  in  the  records  of  hazardous  material  movements.  Part  of  this 
information  can  be  obtained  from  CAIMS  (Conventional  Ammunition  Inventory 
Management  System)  which  has  records  of  all  ordnance  transactions.  There 
is  also  an  accounting  of  total  weights  of  ordnance  by  the  SPCC  (Ships 
Parts  Control  Center).  It  may  also  be  necessary  to  obtain  individual 
records  of  ordnance  movement  at  the  base,  but  it  will  be  important  not  to 
place  upon  Navy  personnel  any  additional  data  reporting  than  is  already 
required. 
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The  development  of  the  data  base  for  impact  events  is  summarized  in 
Figure  4-2.  The  data  base  will  need  an  addressing  procedure  so  that 
activity  links  can  be  easily  accessed  and  identified.  In  addition  to 
the  event  probability  data  (r  and  n),  other  information  should  be  stored, 
detailing  such  parameters  as  drop  height,  so  that  probability  of  detona¬ 
tion  as  a  function  of  severity  of  a  fall  can  be  computed  in  a  later  step 
in  the  program.  Also  because  the  data  base  will  be  limited,  parameters 
describing  the  prior  estimate  of  the  event  probabilities  will  be  included 
to  afford  Bayesian  estimates  of  mishap  probabilities. 
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Figure  4-2.  Data  Base  Development  for  Impact  Events 


4.3.2  Fire  Events  Data  Base 

The  data  base  (Figure  4-3)  for  fire  events  will  be  constructed  primarily 
from  information  gathered  at  the  Navy  Safety  Center.  A  discussion  of  the 
structure  of  this  data  is  described  in  the  discussion  of  computing  fire 
events.  In  addition,  Appendix  B  contains  tables  which  were  used  in  the 
development  of  fire  frequency  probabilities  in  a  previous  study  for  NAV- 
FAC  [3].  The  data  base  for  fire  frequency  should  prove  reasonably  straight¬ 
forward  to  develop.  Problems  are  going  to  start,  however,  when  estimates 
must  be  made  on  the  spread,  intensity,  and  duration  of  fires  as  a  function 
of  fire  load  (stored  flammable  materials),  efficiency  of  firefighting, 
effectiveness  of  fire  control  systems  (i.e.,  sprinklers)  and  structural 
considerations.  As  discussed  later,  this  area  will  contain  considerable 
uncertainty. 
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Figure  4-3.  Data  Base  Development  for  Fire  Events 


4.3.3  Conditional  Initiation  Data  Base 

This  data  base  (Figure  4-4)  is  to  provide  information  on  the  probability 
of  initiations  of  various  ordnance  based  on  velocity  of  impact,  temperature 
and  duration  of  temperature,  effects  of  missile  impacts,  effects  of  over¬ 
pressure,  etc.  Much  of  the  information  will  be  required  in  the  form  of 
conditional  probabilities,  e.g.,  the  probability  of  a  detonation  given  a 
fall  of  "x"  ft.  It  is  realized  that  there  will  be  a  sparsity  of  data  in 
a  number  of  areas  involving  a  number  of  different  explosive  types.  On  the 
other  hand,  this  conditional  information  is  very  important  because,  as 
ordnance  changes,  these  conditional  probabilities  change,  leading  possibly 
to  some  rather  large  changes  in  the  probability  of  certain  explosive  events. 
With  the  large  uncertainties  that  can  be  anticipated  in  these  probabilities 
or  probability  distributions,  it  will  be  expected  that  all  numbers  coming 
from  this  data  base  will  be  qualified  by  uncertainty  distributions. 
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Figure  4-4.  Data  Base  Develooment  for  Conditional  Initiation 


4.4  Impact  Events 

Explosions  of  ordnance  due  to  impact  either  from  falls  or  from  impacting 
debris,  could  be  considered  as  occurring  at  a  frequency  described  by  a 
Poisson  process.  This  would  lead  to  an  exponential  description  of  the 
probability  of  failure  based  on  period  of  exposure  to  the  particular 
accident  environment.  However,  in  this  study,  the  proposed  approach  of 
breaking  activities  down  into  links,  each  having  a  mishap  probability, 
eliminates  the  use  of  probabilities  based  on  period  of  exposure.  There 
may  be  exceptional  occasions,  such  as  transportation  of  explosives,  where 
the  travel  distance  can  be  broken  into  several  links  and  thus  the  probabil¬ 
ity  of  mishap  during  travel  can  be  proportionally  increased  with  distance 
by  adding  links.  This  would  be  roughly  equivalent  to  increasing  the  time 
of  exposure  and  hence,  the  mishap  probability. 

Accident  probabilities  involving  impacts  as  initiating  events  will  be 
based  on  the  following  procedure: 

(1)  Each  of  the  handling  activities  at  the  base  will  be  broken  into 
activity  links  which  have  descriptions  in  the  impact  events  data 
base.  Thus,  the  analyst  who  constructs  the  activity  networks  for 
ordnance  handling,  will  have  to  make  up  these  networks  from  defined 
links  which  have  been  included  in  the  data  base,  and  which  have 
established  probability  distributions. 

(2)  Along  with  these  defined  activities,  the  user  will  have  to 
input  the  location  whereat  the  accidents  can  take  place.  Thus, 
the  event  can  have  a  location  as  well  as  a  probability. 
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(3)  The  probabilities  will  now  be  combined  using  the  individual  probabil¬ 
ities  of  the  mishaps  in  the  links  to  determine  the  probability  of  an 
event  from  an  activity.  It  will  be  assumed  that  if  an  activity  covers 
a  wide  area,  such  as  transporting  of  ordnance,  that  it  will  be  broken 
into  several  links,  each  having  a  representative  location  where  the 
potential  detonation  could  take  place. 

The  probability  of  an  event  in  one  of  the  activity  links  will  be  repre¬ 
sented  binomially  with  its  uncertainties  described  by  a  beta  distribution. 
Since  there  is  likely  to  be  a  sparsity  of  data,  it  is  suggested  that  these 
binomial  probabilities  be  developed  using  a  Bayesian  methodology  which 
uses  beta  distributions  as  prior  distributions.  A  discussion  of  this 
methodology  follows  in  Section  5  and  in  Appendix  A. 

4.5  Computation  of  Detonation  Events 

The  probabilities  computed  for  impact  events  will  provide  the  probability 
of  mishap,  but  not  necessarily  of  detonation.  Accompanying  the  mishap 
probability  will  be  the  parameter  upon  which  the  conditional  detonation 
probability  is  based.  Thus,  if  a  torpedo  is  dropped  from  40  ft.,  the 
conditional  detonation  probability  will  be  computed  based  on  a  fall  of 
40  ft.  This  probability  will  then  be  multiplied  times  the  mishap 
probability  to  get  the  probability  of  detonation.  Yield  will  also  be 
included  at  this  point  to  be  carried  forward  in  the  analysis.  Note  that 
if  the  drop  height  of  the  torpedo  warhead  is  two  feet  instead  of  forty, 
the  conditional  probability  of  detonation  will  be  much  lower  as  reflected 
by  the  information  coming  from  the  conditional  initiation  data  base.  It 
might  also  be  mentioned  here  that  the  data  base  will  have  to  contain  drop 
heights  and  initiation  information  for  all  types  of  explosive  materials 
and  containments. 

4.6  Fire  Initiation  of  Explosives 

The  potential  fires  will  be  identified  at  particular  locations  at  the 
facility.  Each  fire  will  have  an  intensity,  duration,  and  probability. 

In  the  next  computation,  the  ordnance  locations  will  be  compared  to  the 
fire  locations  and,  using  conditional  probabilities  of  ordnance  initia¬ 
tion  based  on  the  fire  parameters  and  the  proximity  to  the  fires,  probabil¬ 
ities  of  detonation  of  the  various  ordnance  will  be  computed.  The  output 
of  this  computation  would  then  be  the  yield  and  probability  of  detonation 
of  the  various  ordnance  due  to  fire. 
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Sympathetic  Detonation 


In  previous  steps  in  the  program,  individual  detonations  were  computed 
and  predicted  due  to  causes  by  direct  impact  or  fire.  In  many  cases, 
this  single  initial  event  will  not  offer  a  threat  to  structures.  However, 
if  ordnance  which  does  detonate  is  located  closely  to  other  ordnance,  its 
initiation  could  lead  to  a  much  larger  detonation  by  the  communication 
from  one  weapon  to  another.  Hence,  the  purpose  of  this  step  in  the 
computation  is  to  determine  the  likelihood  of  a  larger  explosion  because 
of  the  initiation  of  ordnance  at  specific  locations.  This  particular 
computation  in  the  program  would  again  depend  on  conditional  probabilities 
obtained  from  the  conditional  initiation  data  base.  It  would  require 
an  evaluation  of  each  ordnance  location  (and  yield)  relative  to  every 
other  ordnance  location  (and  yield).  At  the  end  of  the  computation,  there 
would  be  a  revision  of  the  yields  at  each  location  and  the  probabilities 
that  explosions  could  occur  at  these  levels. 

4.8  Output 

The  output  of  this  proposed  program  is  to  be  used  as  the  input  into  a  risk 
analysis.  Required  in  the  risk  analysis  is  the  location  of  each  explosion, 
the  yield  at  that  location,  and  the  probability  that  the  explosion  will  take 
place  on  an  annual  basis.  Hence  the  output  of  this  routine  will  provide  a 
list  of  all  locations,  yield  levels  (there  may  be  more  than  one  at  each 
location)  and  the  probabilities  associated  with  each  yield  level.  There 
will  also  be  uncertainties  associated  with  the  probabilities.  A  discussion 
of  how  the  density  distribution  of  these  uncertainties  will  be  estimated 
is  contained  in  Section  5. 
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5.  STATISTICAL  MODELS 

5.1  Introduction 

The  purpose  of  this  section  is  to  describe  in  more  detail  the  mathematical 
models  which  would  be  employed  in  the  prediction  of  events  due  to  impact, 
fire  or  sympathetic  initiation.  The  approach  to  these  models  varies  be¬ 
cause  of  the  varying  structure  of  the  problem  and  the  varying  quality  of 
the  data  base.  In  each  contributing  part,  uncertainty  of  the  answer  will 
be  a  real  problem  and  thus  an  effort  Is  made  to  synthesize  these  uncer¬ 
tainties  and  carry  them  forward  along  with  the  "best  estimates"  of  each 
•final  explosion  probability. 

5.2  Mishap  (Impact)  Probability 

As  mentioned  earlier,  the  use  of  links  in  the  definition  of  activities 
permits  the  application  of  binomial  probabilities  in  evaluating  the 
occurrence  of  mishaps  during  these  links.  The  product  of  mishap  probabil¬ 
ity  and  the  conditional  probability  of  a  detonation  given  the  mishap 
will  provide  the  probability  of  a  detonation  during  a  link  activity 

Pr(detonation)  =  P(det|mishap)P(mishap)  (5-1) 

P(mishap)  will  be  binomial  in  form.  P(det| mishap)  will  be  dependent  upon 
the  nature  of  the  mishap  (e.g.,  the  height  of  fall)  and  must  be  developed 
from  theoretical  and  experimental  data.  Since  P(det|mishap)  is  a  function 
of  an  independent  ^variable  (such  as  height)  there  will  quite  likely  be 
insufficient  data‘*to  accurately  define  the  relations  and  the  uncertainty 
distributions  will  become  the  result  of  judgment  by  analysts.  This  will 
be  discussed  further  in  Section  5.4. 

The  problem  that  is  posed  by  the  mishap  probability  data  is  that  it  is 
probably  too  sparse  to  provide  a  confident  estimate  of  the  true  probabil¬ 
ity  of  mishap,  tt.  The  maximum  likelihood  estimate  of  tt  is  the  ratio  r/n. 
Event  probabilities  of  1  x  10’3  to  1  x  10"  7  are  expected  and  it  is  unlikely 
that  the  current  data  base  will  have  a  record  of  up  to  10/  activities  (n) 
in  order  to  have  sufficient  experience  to  provide  an  accurate  estimate  of 
tt  from  r/n. 

The  classical  statistical  (deductive)  approach  to  this  problem  relies 
entirely  on  the  ratio  of  r/n.  With  tt  expected  to  be  very,  very  small, 
it  is  very  likely  that  the  data  base  will  provide  r  =  0  and  n  relatively 
small.  The  resulting  confidence  bounds  on  the  estimate  of  n  will  probably 
be  relatively  wide  and  produce  estimates  of  it  which  would  give  unaccept¬ 
ably  high  upper  confidence  bounds  for  the  probability  of  occurrence 
of  a  mishap.  These  probabilities  would  be  unacceptably  high  because 
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intuitively  the  Navy  experience  over  the  past  half  century  has  not  had 
a  mishap  rate  as  high  as  these  bounds  from  a  limited  sample  would  indicate 
The  problem  is  that  the  recorded  sample  size  for  well  defined  activities 
will  be  very  small  compared  to  the  aggregation  of  activities  over  many, 
many  years. 

Having  the  statistical  model  rest  entirely  on  carefully  monitored  exper¬ 
ience  is  always  preferred.  And,  as  the  data  base  grows  over  time  it  wi  ll 
become  more  adequate  in  providing  the  necessary  information  to  properly 
estimate  the  values  of  tt  for  each  link.  In  the  meantime,  however,  it  is 
suggested  that  a  Bayesian  approach  be  used  wherein  the  greater  period  of 
history  of  explosive  handling  be  interpreted  into  a  judgment  of  what  the 
true  mishap  probability  might  be.  This  Bayesian  approach  balances  judg¬ 
ment  (prior)  with  data  to  provide  a  more  balanced  estimate  (posterior). 

As  the  accuracy  of  the  estimate  of  tt increases  with  the  expanding  data 
base,  the  influence  of  the  prior  decreases  until  the  posterior  from  the 
Bayesian  approach  is  essentially  equivalent  to  that  which  would  result 
directly  from  the  classical  statistical  approach.  Thus,  the  purpose  of 
the  use  of  a  Bayesian  model  is  to  insert  judgment  into  the  computation 
when  the  data  base  is  inadequate.  This  judgment,  in  effect,  artificially 
expands  the  data  base,  but  its  influence  diminishes  as  the  data  base 
increases. 

In  the  case  of  binomial  sampling,  a  Beta  distribution  as  typified  in 
Figure  5-1  is  mathematically  very  convenient  in  establishing  the  shape 
of  the  distribution  for  the  prior  estimate  of  tt  ,  and  also  represents  the 
probability  distribution  of  the  posterior  estimate  of  tt.  The  mathematical 
development  in  Section  A.l  of  Appendix  A  demonstrates  how  the  beta  distri¬ 
bution  can  be  derived  from  a  conditional  probability  relation  involving 
the  binomial  distribution. 

The  Beta  distribution  Is  continuous  with  the  limits  of  0  and  1  and  has 
two  parameters,  n  and  r.  The  density  function  is  shown  in  Equation  5-2. 


Figure  5-1.  Beta  Distribution  Density  Function 
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=  0  elsewhere 


where 


and  r(  )  is  a  Gamma  function  [4], 
not  be  integers. 

The  mean  and  variance  are 
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If  r  and  n  are  integers,  the  density  function  takes  the  form 


(n-l)i 

f  (p)  =  - 

p  (r  -  1 )!  (n  -  r  -  1 )! 


PM  (1-P)n'r_1,  Os  p  <  1  (5-5) 


=  0  elsewhere 

and  the  values  of  the  beta  density  function  can  be  determined  from  tables 
of  the  binomial  distribution.  This  relationship  with  the  binomial  distri¬ 
bution  is  very  convenient  and,  in  fact,  the  beta  distribution,  in  the 
lexicon  of  Bayesian  statistics,  is  known  as  the  "conjugate  prior"  [5,6,7] 
to  the  binomial  distribution  when  using  Bayes  Theorem  to  make  estimates 
of  the  distribution  of  the  probability  of  an  event. 

If  the  parameters,  r  and  n,  of  the  beta  distribution  are  not  known,  but 
the  mean  and  variance  are  known,  the  parameters  can  be  computed  as  follows 


-pJ 


(5-6) 
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Thus  if  an  individual  has  a  judgment  on  what  the  values  of  pp  and  o  are, 

he  can  then  construct  an  "equivalent"  sample  size,  n',  and  number  of 
incidents,  r'.  As  will  be  shown  in  Appendix  A,  the  combination  of  the 
prior  (the  "equivalent"  n'  and  r ' )  with  actual  sampling,  produces  a  new 
beta  distribution  (posterior)  having  parameters 


r"  =  r'  +  r  (5-8) 

n"  =  n'  +  n  (5-9) 


Note  that  when  n  and  r  (the  actual  data)  become  large  in  comparison  to 
n'  and  r',  the  effect  of  the  data  completely  overshadows  the  original 
estimate.  On  the  other  hand,  when  the  data  is  sparse,  the  analyst's 
judgment  which  leads  to  r'  and  n'  is  very  important. 

The  development  in  Appendix  A  demonstrates  that  regardless  of  whether  a 
Bayesian  approach  is  used  or  not,  the  beta  distribution  represents  the 
uncertainty  distribution  for  the  binomial.  Hence,  in  the  final  represen¬ 
tation  of  uncertainty,  the  distribution  as  shown  in  Equation  (5-2)  is 
valid  with  either  n  and  r  or  n"  and  r"  as  the  parameters. 

5.3  Fire  Events  Probabilities 


The  occurrence  for  fire  may  be  considered  a  relatively  rare  and  random 
event.  Using  a  Poisson  process  to  represent  these  events,  the  probability 
of  occurrence  of  v  fires  in  time  t  is 


Pf(v)  «  (y  t)v  — — r 
fv  '  v 'm  v. 


■yt 

m 


(5-10) 


where  v  is  the  mean  number  of  fires  in  the  subject  structure, 
m 

For  buildings,  Lie  [8]  and  Burros  [9]  suggested  that  y  =  pA  where  A 
is  the  total  floor  area  of  the  building  and  p  is  a  constant  representing 
buildings  with  similar  occupancies.  The  expression  is  valid  even  if  the 
building  has  unequally  sized  compartments. 
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In  Ref  [2],  seven  years  of  Naval  on-shore  fires  data  was  obUiied,  trans¬ 
lated  into  fire  frequency  and  presented  in  tabular  form.  An  .  bbreviated 
version  of  this  information  is  shown  in  Table  5-1  [10].  The  complete 
tables  are  reproduced  from  Ref[2]and  included  in  Appendix  B. 


OCCUPANCY  * 

FIRE  FREQUENCY  n.  p 

Cold  storage  and  refrigeration  bldg.;  engine 
test  cells,  hangers;  wharves 

0.1  -  0.5 

[.432] 

Drydocks;  R  $  0  labs;  schools  and  training  bldg.; 
warehouses;  mi  sc.  repair  shops 

o 

cn 

i 

o 

[.649] 

Manufacture,  assembly,  and  modification  bldg.; 
commissaries;  retail  stores;  churches;  child 
care  centers;  offices;  family  dwellings;  garages; 
ordnance  storage  bldg;  rec.  bldg. 

1.0  -  3.0 

[Ml] 

Communication  and  navigation  bldg  ;  medical 
facilities,  power,  heat,  and  utility  bldg. 

3.0  -  5.0 

[4.54] 

Barracks,  clubs,  eating  facilities;  prisoner 
housing 

5.0  -  10.0 

[6.32] 

Fire  and  police  stations;  banking  facilities; 
museums;  laundries  and  dry  cleaning  bldg. 

10.0  -  50.0 

[27.9] 

Auto  gas  stations 

>50.0 

[73.5] 

*  Edited  lilt.  Keen  value  shown  In  brackets.. 
(1  fire  per  so  ft  •  10.75  fir*  per  **) 


Table  5-1.  Fire  Frequency  by  Building  Occupancy 
( 1 0-6  fires  per  year  per  square  foot) 


No  corresponding  data  were  acquired  for  vessels  moored  at  piers  in  the 
harbor.  Such  information  along  with  land  vehicle  data  would  have  to  be 
gathered  to  complete  the  data  base.  In  addition,  uncertainties  in  the 
values  of  p  must  be  developed  but  these  uncertainties  cannot  be  developed 
around  binomial  sampling  because  even  though  the  number  of  fires  (r)  is 
known,  the  number  of  opportunities  (n)  is  not.  The  rate  p  was  developed 
by  dividing  r  by  the  total  square  footage  of  exposed  buildings  in  the 
appropriate  categories.  The  distribution  can  best  be  described  by  study¬ 
ing  the  year-to-year  variation  of  r  (normalized  for  the  adjustments  in 
total  exposure  each  year).  A  superficial  review  of  Table  1  in  Appendix  B 
indicates  that  the  coefficient  of  variation  (sr/r)  for  r  is  usually  less 
than  one  and  frequently  less  than  one-half.  This  would  indicate  that  the 
resulting  distributions  for  p  would  have  similar  coefficients  of  varia¬ 
tion.  Assuming  p  to  be  log-normally  distributed  (no  solid  justification 
at  this  point),  one  will  obtain  uncertainty  bounds  having  reasonable 
width. 
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Fire  intensity  and  duration  will  be  dependent  upon  the  type  and  quantity  of 
flammable  material  in  the  structure  or  vehicle,  the  building  or  vehicle  con¬ 
struction,  the  level  of  fire  protection  (sprinklers,  etc.)  and  the  efficiency 
of  the  available  firefighters.  This  information  is  not  currently  available 
and  will  have  to  be  developed  from  studying  the  records  of  fires  at  the 
Navy  Safety  Center.  Fire  damage  algorithms  have  been  developed  by  Lee  [2] 
for  structures  using  a  Delphi  study  involving  Navy  fire  experts.  The  results 
of  this  study  showed  a  wide  spectrum  of  opinion  as  to  degree  of  damage  given 
a  set  of  conditions.  A  typical  set  of  fire  damage  matrices,  from  Ref  [2  j 
is  shown  in  Table  5-2.  Note  that  the  numbers  in  each  column  are  probabili¬ 
ties  and  sum  to  one,  thus  representing  a  probability  density  function  of 
damage  level. 
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NIHOR  (1) 

n 

65 

62 

.58 

S2 

16 

70 

61 

48 

S3 

42 

36 

52 

41 

11 

31 

23 

20 

LIGHT  U) 

16 

16 

17 

23 

2S 

14 

16 

20 

17 

18 

20 

17 

18 

23 

18 

20 

16 

14 

MODERATE  (3) 

06 

13 

.16 
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IS 

20 

06 

11 

15 

.13 

19 

26 

.14 

17 

.19 

14 

V 

24 

HEAVY  (4) 

0) 

04 

07 

OS 

.OS 

08 

03 

04 

04 

08 

09 

.10 

10 

11 

18 

14 

16 

18 

total  (6) 

01 

02 

OS 

02 

03 

07 

02 

04 

11 

08 

10 

12 

06 

06 

14 

16 

16 

24 

Table  5-2.  Typical  Set  of  Fire  Damage  Matrices 


For  the  problem  being  considered  in  tMs  study,  structure  damage  from 
fire  is  secondary  to  the  areal  extent,  the  intensity  and  the  duration 
of  the  fire.  It  will  be  upon  these  parameters  that  probabilities  of 
initiation  of  exposed  ordnance  will  be  based.  Hence  the  additional 
effort  with  the  Navy  Safety  Center  data  base  will  have  to  contain  an 
evaluation  which  will  aid  in  quantifying  these  parameters.  Undoubtedly 
these  parameters  will  have  a  significantly  larger  uncertainty  than  the 
fire  frequency  parameter,  p. 
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5.4  Condi tional  Detonati on  Probabilities 

It  is  assumed  that  the  conditional  probability  of  detonation  will  have  a 
functional  form  of  the  nature  shown  in  Figure  5-2. 
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Figure  5-2.  Conditional  Probability  of  Detonation 

The  precise  form  of  such  a  curve  can  only  be  determined  after  many 
tests  made  at  varying  values  of  h.  Since  the  nature  of  the  results  would 
be  interpreted  as  binary,  a  proper  evaluation  tool  would  probably  be 
probit  analysis  [11],  Regardless,  there  would  probably  be  a  great  deal 
of  scatter  and  also  partial  detonations  to  confuse  the  precision  of  the 
conditional  probability.  Thus,  along  with  the  best  estimate  of  Pr(detih), 
a  distribution  of  uncertainty  will  be  required  for  each  value  of  h.  This 
distribution  is  typified  in  Figure  5-3. 

It  is  probable  that  the  uncertainties  shown  in  Figure  5-3  are  probably  less 
than  those  which  will  result  from  a  systematic  study  of  the  problem. 

The  uncertainty  is  compounded  by  lack  of  test  data,  inability  to  scale 
data,  and  the  variability  of  materials. 

The  uncertainty  can  probably  best  be  modeled  by  the  beta  distribution 
because  of  the  0  to  1  limits  of  the  distribution.  The  distribution  param¬ 
eters  would  be  established  using  Equations  (5-6)  and  (5-7).  Whether  a 
Bayesian  approach  with  both  judgment  and  data  could  be  used  is  not  certain. 
A  test  program  of  any  real  scale  may  be  too  expensive  and,  in  this  case, 
there  may  have  to  be  very  heavy  reliance  on  the  judgment  of  professionals 
in  the  field,  supported  by  selective  analyses  and  tests. 
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Pr  (detlh) 


Figure  5-3.  Uncertainty  of  Conditional  Probability  of  Detonation 
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The  final  output  of  the  analysis  must  be  a  list  of  events  and  locations 
of  these  events,  and  then  a  series  of  levels  of  yields  with  probabilities 
associated  with  each;  The  probabilities  Will  be  the  result  of  a  sum  of 
independent  mishaps  located  at  the  same  place,  multiplied  by  the  condi - 
tidnal  probabilities  associated  with  the  nature  of  the  initiating  event. 
The  probability  of  a  detonation  of  a  particular  yield  at  a  particular 
location  could  be  represented  by  the  expression 

m 

Pr(Yi)  -  £  PriYJhJ  Pr(Ei)  (5-11) 

J  1*1  J  1  1 


where  P(E^)  is  the  probability  of  mishap  E.  which  has  a  parameter  h^ 
(such  as  drop  height)  and  Pr(Y-|h. )  is  the  conditional  probability  of 

J  • 

yield  Yj  given  parameter  h.. .  h^  could  also  refer  to  a  collection  of 

fire  parameters  or  parameters  associated  with  the  environment  created  by 
the  detonation  of  other  ordnance. 


It  is  probably  desirable  to  deal  only  with  preselected  discrete  yield 
levels  in  order  to  reduce  the  number  of  final  computations.  These  levels 
must  be  close  enough  so  that  the  incremental  changes  in  levels  will  not 
be  large  enough  to  create  errors  in  the  eventual  computation  of  expected 
damage  in  the  risk  program. 


The  biggest  problem  in  the  synthesis  of  probabilities  will  be  with  the 
propagation  of  uncertainty  through  the  model.  Since  the  probability 
uncertainties  may  be  represented  by  various  distributions  (beta,  log  normal, 
etc.)  and,  because  the  probabilities  appear  both  as  products  and  sums,  it 
is  suggested  that  the  uncertainty  distributions  on  yield  probability  be 
determined  by  Monte  Carlo  simulation.  There  may  be  some  difficulties  with 
this  because  of  the  low  probability  of  events  and  the  resulting  need  cor  a 
very  large  number  of  cycles.  Since  the  computations  are  rapid,  the  many 
cycles  may  not  prove  to  be  a  problem,  however,  random  number  generation 
of  beta,  variables  could  still  be  a  problem  (sea  Appendix  A)  and  the 
lognormal  distribution  may  prove  to  be  the  more  desirable  distribution. 

A  flow  diagram  of  a  typical  Monte  Carlo  routine  is  shown  in  Figure  5-4. 

A  second  less  precise  but  cheaper  method  to  obtain  the  uncertainty  in 
Pr(Y.)  is  to  form  a  Taylor  Series  expansion  of  Equation  (5-11).  If  all 

higher  order  terms  are  ignored,  the  expansion  becomes 
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.  Monte  Carlo  Routine  for  Computing  the  Distribution  of  Pr ( Y . ) 
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APr(Y.)  =  X/PHVjh.)  APr(Ei 
J  i=1  J  1 
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(5-13) 


This  assumes  statistical  independence  of  all  Pr(Ei)  and  Pr(Y  -  J  hi )  which 

mav  not  be  true.  It  also  provides  only  a  variance  and  not  a  distribution. 
Nevertheless,  it  is  probably  worth  further  examination  if  the  simulation 
approach  appears  to  be  too  expensive. 


6.  DATA  DEVELOPMENT 

The  methodology  suggested  in  this  report  requires  the  development  of  three 
data  bases  which  were  discussed  in  Section  4.3.  ^he  message  is  clear  that 
no  systematic  evaluation  of  risk  due  to  explosive  detonation  can  be^  perrormed 
without  a  well-defined  and  developed  set  of  data  bases.  Thus,  if  this 
approach  is  adopted*  a  commitment  must  be  made  to  formulate  the  procedures 
and  definitions  necessary  to  collect  data  in  the  format  necessary  to  compute 
the  mishap  probabilities,  conditional  probabilities  and  fire  probabilities. 

It  is  most  likely  that  each  data  base  would  be  a  separate  activity.  The 
impact  events  data  base  would  arise  from  a  careful  study  of  all  of  the 
different  handling  procedures  for  ordnance  that  are  now  in  existence  at 
the  various  Naval  facilities.  These  studies  would  provide  a  basis  for 
estimating  the  number  of  exposures  (n)  which  can  be  coupled  with  the 
number  of  mishaps  (r).  The  work  would  probably  require  developing  methods 
to  infer  the  number  of  activities  in  various  links  from  reports  of  movement 
of  ordnance  which  do  not  have  the  required  detail.  As  emphasized  earlier 
in  the  report,  it  will  be  necessary  to  devise  study  procedures  that  will 
not  create  new  data  handling  problems  for  active  Navy  personnel  at  the 
facilities. 

The  fire  events  data  base  will  require  extensive  interaction  with  fire 
prevention  and  control  personnel  within  the  Navy.  It  may  also  require 
searches  within  the  literature  to  establish  means  to  predict  duration, 
intensity,  and  extent  of  fires. 

The  conditional  initiation  probabilities  will  require  laboratory  support. 

The  numbers  associated  with  these  probabilities,  as  mentioned  earlier, 
will  probably  result  from  the  combination  of  test  results  and  analysis. 

There  will  be  a  number  of  variables  involved:  conditional  probability  of 
initiation  from  impact;  conditional  probability  of  initiation  from  thermal 
environment;  and  conditional  probability  of  iniciation  from  the  environ¬ 
ment  created  by  detonation  of  neighboring  ordnance. 
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APPENDIX  A 

MATHEMATICAL  DEVELOPMENTS 

A. I  Computation  of  Mishap  (Impact)  Probability  Using  the  Binomial 

and  Beta  Distributions 


The  purpose  of  this  section  is  to  define  alternatives  for  characterizing 
mishap  probability  for  each  link.  The  objective  is  to  define  an  estimation 
procedure  which  will  allow  maximal  consistent  use  of  existing  data,  facili¬ 
tate  the  update  of  the  estimates  as  new  data  become  available,  and  provide 
a  means  of  expressing  the  uncertainty  in  these  estimates. 

We  adopt  the  perspective  that  each  time  a  handling  link  is  exercised  (a 
given  type  of  handling  occurs)  that  a  sample  has  been  taken  from  an 
infinite  population  of  all  possible  occurences  of  the  link  (under  comparable 
conditions).  Two  types  of  descriptions  are  appropriate  to  this  viewpoint: 
(1)  We  can  regard  each  exercising  of  a  link  as  a  Bernoulli  trial  with  the 
possible  outcomes  of  a  mishap  and  no  mishap;  and  (2)  We  can  describe  the 
occurrences  of  mishaps  as  a  time  dependent  Poisson  process. 

First  consider  the  Bernoulli  trial  description.  Bernoulli  trials  are 
characterized  by  the  binomial  distribution.  If  the  per  trial  mishap 
probability  is  designated  as  it,  then  the  probability  of  exactly  rQ  mishaps 
in  n  trials,  Pr  (r  =  rQ),  is  given  by 

Pr  (r  =  rQ)  =  (rj  tt  (1-tt)  0  (A-l) 

The  probability  of  rQ  or  fewer  mishaps  in  the  n  trials,  Pr  (r  $  r  )  is 
calculated  to  be 

V 

Pr  (r  <  rQ)  (k)  ^  0-7r)n'k  (A-2) 

k=0 


In  the  problem  at  hand,  having  observed  the  number  of  mishaps,  r,  and  the 
number  of  trials,  n,  we  wish  to  estimate  tt  by  a  number  p  based  on  the 
data.  A  natural  requirement  is  that  the  estimate  be  one  that  is  best 


A-l 
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supported  by  the  data,  the  maximum  likelihood  estimator  fulfills  this 
requirement  as  welt  as  having  other  desirable  statistical  properties, 
the  maximum  likelihood  estimator,  p,  for  it  is  given  by 

P  a  f  (A-3) 

In  estimating  mishap  probability  it  should  be  noted  that  while  the  anticipated 

* ,  ,o  c. 

sample  sizes  (n)  are  moderately  large  (10  -  10  b  the  anticipated  number 

of  mishaps  (r)  is  small  (0  -  lQ).  In  particular,  it  is  likely  that  for 

many  operational  links  the  historical  records  will  show  ho  mishaps.  While 

it  is  reasonable  to  say  that  this  indicates  that  the  true  mishap  probability 

is  very  small,  it  is  altogether  inappropriate  to  blindly  apply  the 

maximum  likelihood  estimator  and  estimate  tr  s  p  =  -5-  *  0.  Instead,  we 

n 

inquire  what  probability  distribution  function  for  p  the  data  supports. 

Absent  of  any  data  or  knowledge  of  the  likely  value  for  it,  the  mishap 
probability,  it  would  be  reasonable  to  say  that  all  values,  0<p<l, 
are  equally  likely.  For  any  fixed  value  of  p  the  probability  of  exactly 
rQ  mishaps  in  n  trials,  Pr(r  =  rQn|p),  is  given  by  Equation  (A-l).  Apply¬ 
ing  the  multiplicative  law  for  conditional  probability  and  the  assumption 
that  all  values  of  p  were  equally  likely  (p  Is  uniformly  distributed),  we 
calculate  the  absolute  probability  of  rQ  mishaps  as  follows: 

1 

Pr  (r  =  rQ)  *  f  Pr(r=rQ,nj p)Pr(p)dp 
0 


r0!(n*r0)!  ( n  +  1 ) ! 


n! 


1 

F+T 


(A-4) 


A-2 


Now,  with  the  information  that  r^  mishaps  were  observed  i n  n  trials  we 
can  apply  Bayes'  theorem  to  determine  the  distribution  of  p  that  this 
implies  *  Bayes1  theorem  for  probability  density  functions  states 

h(i>"|r)  =  .l(rlP.'Jl).(P'.)  *  (fl-5) 

fr(r)  /f<r[p' )g{p’)dp’ 

the  density  function  for  p"  given  r  (the  posterior  density)  is  equal  to 
the  product  of  the  density  function  for  r  given  p1  and  the  absolute  probabil¬ 
ity  density  function  for  p' (the  prior  density)  divided  by  the  absolute  density 
function  for  r.  This  result  may  be  derived  by  successive  applications  of  the 
multiplicative  law  for  probabilities.  Thus,  the  density  function  for  p" 
after  r  mishaps  in  n  trials  is  given  by 

1  •  Pr(r=r  ,n|p' ) 

h,p»|r  *  g  *  - 

r\  r  ,„r,  <A'6) 

=  V(n  +  UP"  0  0  -p1')1"  o) 

r(r0  +  1  )r(n  -  rQ  + 1  )p"r°  (1  -p")(n"ro) 
f  (n  +  2) 


*  This  is  derived  from  the  multiplication  law  cf  probability  where 

Pr(AnB)=P(A|B)P(B)=P(B|A)P(A)  which  when  rearranged  gives  P (A  1 B )  # 

The  probability  density  form  of  this  equation  is  given  above  in  Equation  (A-5). 
The  Bayesian  formulation  can  be  interpreted  as  finding  a  new  value  of  the 
probability  of  A  due  to  the  occurrence  of  B.  P(A)  is  defined  as  the  prior 
(original)  estimate  of  the  probability  of  A  and  P(AjB)  is  the  revised  (posterior) 
estimate.  The  ration  P(B|A)/P(B)  is  the  "likelihood"  that  the  result  B  would 
occur  given  the  prior  P(A).  Developments  and  discussions  of  the  Bayesian 
methodology  are  included  in  a  number  of  texts  [1,2,3]. 
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This  probability  density  function  (p.d.f;)  as  mentioned  in  Section  5 
is  known  as  the  beta  p.d.f.  in  subsequent  discussion  we  will  use  the 
shorthand  1/B(r0i  ,n-r^j  for  the  coefficient  appearing  in  this  p.d.f. 

Suppose  that  all  of  the  data  collected  up  to  some  designated  time  have 
resulted  in  r  mishaps  out  of  n  handlings;  Suppose  that  in  the  next 
increment  of  time,  r1  mishaps  occur  in  n'  handlings.  Then,  by  Equation 
(A-6)  the  p.d.f.  for  p"  with  these  data  is  given  by 


h(p"|r" 


r  +  r'i  n" 


n  +  n' )  = 


p„(r+r')  (T.pn^+n'-rV) 
B(r+r'  ,  n+n'-r-r') 


(A-7) 


Consider  the  same  data  from  a  different  perspective:  After  collecting  the 
first  sample  our  best  estimate  of  the  distribution  of  p  is  given  by 


Ml^lr-  -  r.  n»  .  n)  ■ 


,(n-r) 


(A-8) 


We  wish  to  employ  Bayes'  theorem  Equation  (A-5)  using  Equation  (A-8)  as 
a  prior  together  with  the  r'  mishaps  out  of  n'  handlings  in  the  second 
epoch.  The  new  density  is  given  by 


k(p'"|r,  r\  n,  n') 


(A-9) 


The  denominator  is  calculated  as  follows: 
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r  KaiL..“v 


i 


_  n ' !  (n  ~  r ) !  r !  (r  +  r 4 ) !  (n  +  n'  -  r  -  r1 ) ! 
n ! (n 1  -  r ’ ) !  r1 !  (n  +  n'  +  1 )! 


(A-10) 


The  numerator  is  given  by  the  integrand  of  Equation  (A-10).  Thus,  the  new 
posterior  is  their  ratio: 


_ni  r  +  r'  , ,  ,r,  +  n'  -  r  -  r* 

k  (p'"  |r,  r',  n,  n')  =  - - ^ 2 — L — -  (A-ll) 

B{r+r',n+n'  -r-r1) 

This  is  the  same  result  we  obtained  treating  the  data  as  a  single  batch. 

In  other  words,  as  we  might  expect, the  Bayesian  calculation  is  consistent, 
when  applied  as  described  above,  with  a  direct  calculation  of  the  distri¬ 
bution  of  p. 


! 


4 
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Let  us  vary  the  above  procedure:  Suppose  that  in  the  first  time  period 
our  record  keeping  was  incomplete,  it  might,  for  example,  be  that  data 
would  indicate  only  that  over  a  given  time  period  (of  known  activity 
level)  the  total  number  of  mishaps.  For  example,  between  World  War  II 
and  1960  it  is  possible  that  detailed  records  are  unavailable;  It  would 
be  more  likely  to  discover  written  records  of  major  accidents  and  only 
personal  recollections  of,  say*  the  number  of  times  torpedos  were  dropped 
To  use  this  information  we  must  distribute  these  mishaps  to  links  and 
assess  link  activity.  This  information  may  be  characterized  using  esti¬ 
mates  of  "pseudomishaps"  that  occur  during  the  "pseudotrials"  in  which 
the  link  is  exercised,  or  it  may  be  characterized  in  terms  of  an  estimate 
of  mishap  probability  and  the  uncertainty  of  this  estimate.  In  the 
former  case,  the  number  of  "pseudomishaps"  is  used  as  r-j,  and  the  number 
of  "pseudotrials"  is  used  as  n,  in  equation  (A-ll).  In  the  latter  case, 
we  use  the  relationship  between  the  beta  parameters  r  and  n  and  the 
expected  posterior  mishap  probability,  E[p"],  and  its  variance  Var[p"]: 


M  ^  1 

E[p"]  8  where  in  this  case  the  original  assumption  of  a 

prior  with  uniform  distribution  produces  r'  =  1 
and  n'  =  2  and  p"is  the  posterior  estimate  of  v 


Var[p"] 


(r  +  1)  (n  -  r  +  1 ) 
(n  +  2)2  (n  +  3) 


( A- 12) 
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Care  should  be  taken  in  exercising  this  approach,  as  the  very  versatility 
of  the  beta  distribution  leads  to  undesirable  results  from  certain 
combinations  of  means  and  variances.  Values  of  r  less  than  one  result 
in  a  U  shaped  distribution;  This  results  in  an  unreasonable  distribution 
for  many  cases  when  combined  with  data  from  a  new  epoch.  If,  for  example, 
in  the  new  epoch  no  mishaps  have  ocurred,  the  Bayesian  procedure  results 
in  a  "choice"  of  the  left  arm  of  the  distribution  resulting  in  a  dis¬ 
proportionate  variance  reduction.  As  a  traceable  data  base  develops, 
mishap  probability  estimates  from  the  Bayesian  type  of  analysis  are 
governed  increasingly  by  the  data. 

In  addition  to  the  care  required  in  selecting  values  for  the  prior  dis¬ 
tribution  with  the  beta  distribution,  there  are  in  the  present  context 
special  problems  in  generating  random  numbers  with  this  p.d.f.  The 
usual  technique  of  generating  a  beta  variate  is  to  generate  two  gamma 
variates  from  products  of  uniform  random  variables  and  the  beta  distributed 
random  variable  from  the  gamma  variates.  This  is  hopelessly  unwieldy  for 
the  size  of n  (number  of  times  a  link  is  exercised)  expected.  The  other 
standard  method  involves  the  use  of  the  cumulative  beta  distribution 
function.  While  it  might  appear  that  the  simplicity  of  the  beta  distri¬ 
bution  would  make  a  closed  form  implementation  of  this  straightforward,  the 
large  values  of  n  make  this  approach  numerically  intractable.  On  the  other 
hand,  percentage  points  on  the  beta  distribution  can  be  built  up  either 
directly  using  a  numerical  quadrature  technique  (e.y.,  Gaussian  quadrature), 
or  if  the  exact  percentag  points  where  the  distribution  is  known  is  con¬ 
sidered  important,  using  a  root  finder  (e.g.,  Newton-Raphson)  in  conjunction 
with  numerical  quadrature. 

When  adequate  data  are  available  for  characterizing  mishap  probability 
for  each  link,  an  asymptotic  relationship  allows  us  to  employ  the 
distribution  which  is  more  conducive  to  generating  random  numbers. 

Define  A  as  the  likelihood  ratio 
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(A- 13) 


_r/,  »n  -  r 
A  =  P.  LLzJZL  _ _ 

(r/n)r(l  -  r/n)n  '  r 

Then  -2(ln  A)  is  asymptotically  chi  square  distributed  with  one  degree- 

of-freedom.  Thus,  to  generate  a  random  sample  one  could  sample  from 
2 

X  with  one  degree  of  freedom  to  compute  -2  (In  A),  and  solve  Equation  (A-13) 
for  p. 


A. 2  Computation  of  Mishap  Probabilities  Using  the  Log  Normal 
Distribution 


An  alternative  approach  for  the  Bayesian  analysis  is  the  use  of  a  log 
normal  distribution  for  mishap  probability.  This  approach  has  the 
distinct  advantages  of  resulting  in  a  distribution  of  a  reasonable 
form  for  all  data  cases  that  might  be  expected,  being  more  amenable  to 
the  form  in  which  the  initial  mishap  probability  distribution  is  likely 
to  be  available,  and  being  an  easy  distribution  for  generating  random 
numbers.  Past  experience  has  shown  that  the  initial  estimates  are  likely 
to  be  of  the  form  "the  best  estimate  of  the  mishap  probability  is  10"^ 
and  that  estimate  is  good  to  an  order  of  magnitude."  This  type  of  expression 
of  the  distribution  of  a  quantity  is  a  natural  match  to  the  log  normal 
distribution. 


The  problem  with  this  approach  is  that  when  a  log  normal  prior  distribution 
is  combined  with  data  resulting  from  Bernoulli  trials,  the  posterior 
distribution  Is  neither  a  log  normal  distribution  nor  any  one  of  the 
families  of  distributions  accumulated  and  adored  by  applied  statisticians 
because  of  their  analytical  tractability. 
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This  problem  with  the  log  normal  distribution  may  be  avoided  using  a 
series  of  approximations.  We  begin  with  the  log  normal  prior  distribution 
with  a  mean  representing  our  best  estimate  of  the  mishap  probability 
and  a  variance  expressing  the  uncertainty  in  this  estimate.  This  distri¬ 
bution  must  be  approximated  by  a  discrete  distribution.  (See  figure  A-l ) 
Interval  width  is  dictated  by  the  slope  and  magnitude  of  the  probability 
density  function,  f(p).  The  posterior  probability  density  function  after 
r  mishaps  in  n  trials  is  given  by 


h(pjr,n) 

\j 


£pk  sk(1  -  V 


(A-14) 


where 

i  U 

S.  =  the  midpoint  of  the  j  n  interval 

J 

x  L. 

p,  =  the  probability  p  lies  in  the  j  interval 

SJ 

M  =  the  number  of  approximating  intervals 
The  posterior  mean  and  variance  can  be  calculated  by  the  equations 


t  p*s*r  +  1(,-v 

E(p|r,  n)  =  jp- - 

L  pk  ^  -  v"  "  r 
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p - ► 

Figure  A-1.  Discrete  Approximation  to  Log  Normal 
Distribution 


Var(p|r,  n)  ■  g 


(1  -  sk) 


n  -  r 


-  [E(p|r,  n)f  (A-16) 


E  Pk  Sk°  '  V 

k=l 


n  -  r 


These  values  may  then  be  used  to  define  a  log  normal  distribution 
approximating  the  posterior  distribution  for  mishap  probability. 
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Until  this  point  our  discussion  has  been  based  on  treating  mishap 
occurrences  as  Bernoulli  trials.  We  now  shift  to  the  alternative 
description  of  a  time  (and  activity  level)  dependent  Poisson  process. 

For  the  sake  of  the  following  discussion  we  will  assume  that  a  constant 
activity  level  exists  so  that  the  time  dependent  process  is  an  appropriate 
description.  The  Poisson  process  assumes  that  the  probability  of 
exactly  one  mishap  in  a  time  interval  of  length  t  is  proportional  to  the 
length  of  the  interval  with  proportionality  constant  A.  The  probability 
of  exactly  r  mishaps  in  an  interval  of  length  t  is  given  by 

pt(r)  =  - - (A-l  7 ) 
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This  is  equivalent  to  the  statement  the  time  between  mishaps  is  exponentially 
distributed  with  the  following  probability  density  function 


ft(t)  -  Ae  n  (A-18) 

* 

In  either  event  the  gamma  distribution  is  the  natural  conjugate  distribution.  > 

The  development  of  a  Bayesian  formulation  for  these  cases  is  similar  to 
that  for  the  Bernoulli  trial  -  beta  distribution  pairing.  Similar  problems 
exist  with  random  number  generation  for  this  distribution  and  similar 
solutions  can  be  employed  to  overcome  them. 
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APPENDIX  B.  FIRE  OCCURRENCE  DATA 

The  fire  occurrence  data  were  taken  from  Navy  and  Marine  Corps 
Fire  Loss  Experience  (Ashore)  reports  [2]  and  the  corresponding 
real  property  data  from  the  Inventory  of  Military  Real  Property 
[3],  Seven  years  of  data  with  10,013*  loss  fires  were  used. 

The  fire  occurrence  data  is  summarized  in  Table  1  for  the  seven 
years  used  in  the  study  [1].  The  occupancy  classifications 
used  for  fire  reporting  [4]  provide  the  classifications  used  in 
this  table.  The  real  property  data  are  summarized  in  Table  2 
for  the  same  period.  The  resulting  building  populations  for 
which  a  fire  frequency,  p^,  was  determined  is  given  in  Table  3. 
This  was  accomplished  by  aggregating  fire  occurrences  from  Table 
1  with  the  aggregate  areas  from  Table  2  according  to  the  follow¬ 
ing  equation  for  p^: 


ii 

l! 

IV? 

M 


Na  (1969)  +  . . .  +  Ni  (1975) 
Pi  =  Ai (1969)  +  ...  +  Ai(1975) 


(1) 


where 


N^  (xxxx) 
'  A ^ (xxxx) 


=  No.  Fires/sq. ft ./yr.  for  ith  group 
(i.e.,  population) 

=  Total  no.  of  fires  in  ith  group  during  year  xxxx 

=  Total  area  of  ith  group  at  end  of 
year  xxxx  in  square  feet 


Table  2  only  provides  floor  areas  according  to  the  three 
digit  category  code  defined  in  Reference  5.  This  is  the 
most  detailed  breakdown  that  is  available  for  prior  years  [3]. 


This  appendix  contains  a  summary  of  fire  occurrence  and  frequency 
data  developed  by  Lee  and  Eguchi  [1] . 


** 


931  of  these  fires  were,  however,  inapplicable  to  the  study  ,.t  hand. 
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Table  1 .  Occurrence  of  Loss  Fires  at  Naval  Facilities 
1969  -  1975  (Reference  2)  (Continued) 
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TOTALS  1,589  1,369  1,463  1,390  1,533  1,619  1,650  10,613 


Table  2.  Real  Property  at  Naval  Facilities  for  Selected 
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#f Apportioned  according  to  72 — 75  data. 
iP-77  has  units  of  square  yards  for  these  elements.  Assumed  to  be 
feet  instead. 


Table  2.  Real  Property  at  Naval  Facilities  for  Selected 
Category  Codes  (Reference  3)  (Continued) 
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erroneous.  Interpolated  from  71,  73  data  instead 
73 — 75  for  all  seven  years. 


Table  2.  Rea  L  Property  at  Naval  Facilities  for  Selected 
Category  Codes  (Reference  3)  (Continued) 
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Table  3.  Fire  Frequency  by  Category  Code 
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*Titles  for  "Fire  Codes"  from  References  2-6  and  2-8:  titles  for  "Category  Codes"  from  Reference  2-10. 
*£1969  to  1975,  area  in  1000's  of  square  feet. 

#Fire  Frequency  units  are  number  of  fires  per  year  per  square  foot. 
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Table  3-  Fire  Frequency  by  Category  Code  (Continued) 
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Table  3.  Fire  Frequency  by  Category  Code  (Continued) 
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Table  3.  Fire  Frequency  by  Category  Code  (Continued) 
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Table  3.  Fire  Frequency  by  Category  Code  (Continued) 
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A  finer  breakdown  is  required  for  some  categories,  particu¬ 
larly  the  730  and  740  categories  which  encompass  a  plethora 
of  different  occupancies.  To  provide  this  finer  breakdown, 
the  aggregated  category  areas  for  prior  years  was  apportioned 
according  to  the  percentages  existing  on  June  30,  1975. 

These  percentages  were  calculated  using  the  areas  given  in 
the  Inventory  of  Military  Real  Property [6]. 

The  first  digit  of  the  Category  Code  identifies  the  nine  broad 
DOD  facility  classes: 


Operational  and  Training  Facilities 

100 

Series 

Maintenance  and  Production  Facilities 

200 

Series 

Research,  Development,  and  Test  Facil¬ 

ities 

300 

Series 

Supply  Facilities 

400 

Series 

Hospital/Medical  Facilities 

500 

Series 

Administrative  Facilities 

600 

Series 

Housing  end  Community  Facilities 

700 

Series 

Utilities  and  Ground  Improvement 

800 

Series 

Real  Estate 

900 

Series 

B-15 
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